$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: o9DdvQeLVDy4pHxirawgiIGbgiCZ8W5dsNEfYE7v+Us= Subject key identifier: 0B:CA:5F:72:F3:A7:34:AF:90:5F:94:44:F9:FB:E1:4F:D9:1E:77:EB Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 4A01EFEB55F6D25EA461BC1E06CC485445B124D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 02D1 Signing time: Mon 20 Oct 2025 01:25:47 +0000 Manifest this update: Mon 20 Oct 2025 01:20:47 +0000 Manifest next update: Tue 21 Oct 2025 05:05:47 +0000 Files and hashes: 1: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: Sf9gF4sNgGemx5fpKOhcM2Ggw85aIxwi59Tf350UQzY=) 2: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) 3: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:01:ef:eb:55:f6:d2:5e:a4:61:bc:1e:06:cc:48:54:45:b1:24:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Oct 20 01:20:47 2025 GMT Not After : Oct 21 05:05:47 2025 GMT Subject: CN=0BCA5F72F3A734AF905F9444F9FBE14FD91E77EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:bf:ca:d7:01:29:c5:fc:8e:db:93:24:4b: f2:a5:c6:89:a3:07:14:63:45:40:45:d2:2d:29:61: 5f:ac:94:0e:5d:eb:57:d8:ff:91:e0:f5:61:86:09: 85:d3:49:e5:f4:1f:6b:77:33:64:bf:ac:31:6c:34: 28:c6:2f:53:1f:c2:20:64:b1:2a:1b:20:b0:4f:f8: 87:5f:88:ce:39:68:f6:9a:f1:e7:8c:4a:41:4c:e1: 62:54:b0:0a:1a:f2:e8:43:1a:f8:30:0d:34:75:ad: 55:c3:55:d3:00:dc:d9:e9:4f:94:e6:81:21:dd:b7: 62:d3:0e:96:b8:89:be:a7:28:12:23:9d:4f:a0:63: 12:c9:32:31:70:27:53:a7:9b:85:f6:ab:3a:59:3d: 8d:c5:dd:8d:7d:a2:4d:0b:8c:9a:1d:39:9e:39:73: 63:6f:0f:98:10:b7:57:70:ef:04:82:08:1d:e0:0e: d9:5b:f8:53:da:2f:c7:9f:7d:6e:44:7f:1e:9e:32: 46:9a:27:9f:01:bf:25:ff:ee:4f:51:c0:ce:7d:49: 8b:d7:ee:52:37:10:aa:e5:68:07:a2:d7:e0:05:02: c5:ff:65:72:90:92:0b:e8:33:37:04:b1:b4:f2:8f: f1:2b:ad:bc:63:80:7f:6f:f4:1d:15:3f:a8:2b:0d: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CA:5F:72:F3:A7:34:AF:90:5F:94:44:F9:FB:E1:4F:D9:1E:77:EB X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:97:e3:12:6f:63:96:46:dc:e9:cd:de:e5:69:fd:cf:77:a3: 7c:72:8b:e1:3c:a4:ad:22:0f:a9:bf:9d:e5:91:64:0a:e1:b3: 35:82:2e:8d:84:92:24:2e:c8:28:c1:fa:6b:1f:22:50:be:67: 6f:b5:cb:f3:27:18:cc:8f:be:0e:4d:d1:83:54:d6:97:d3:8a: ee:ad:3c:12:dc:ea:23:dd:5d:07:60:e4:e5:cd:03:4e:78:c0: 6b:63:13:b0:f5:88:aa:9c:fb:27:25:2e:e3:1b:a1:2a:4b:34: 52:80:72:b0:52:dd:8d:4c:57:2a:ac:87:56:da:a2:21:ed:5d: b9:f0:a1:b9:db:aa:8a:44:55:a2:1f:1c:75:cb:22:f5:b5:9b: cf:49:99:6c:01:ce:9c:0e:ec:2b:d5:38:dc:33:2d:4e:f7:16: 1d:c0:ce:06:56:8b:11:30:75:cb:8b:ea:0c:0f:3b:5f:b1:c7: f2:ef:b3:d9:c3:1e:f2:b5:c8:e6:e4:aa:63:ab:66:d0:76:62: 95:73:3b:ad:ad:35:31:c2:48:b0:06:b8:4b:7e:54:7a:a0:c4: 01:01:ce:b2:14:17:74:b8:08:aa:10:57:24:19:b8:01:30:72: 1b:98:1f:c7:48:dd:5a:46:4f:3f:1a:99:df:95:92:5c:a7:ca: b4:8d:19:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSgHv61X20l6kYbweBsxIVEWxJNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTEwMjAwMTIwNDdaFw0yNTEwMjEwNTA1NDdaMDMxMTAvBgNV BAMTKDBCQ0E1RjcyRjNBNzM0QUY5MDVGOTQ0NEY5RkJFMTRGRDkxRTc3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvr/K1wEpxfyO25MkS/Klxomj BxRjRUBF0i0pYV+slA5d61fY/5Hg9WGGCYXTSeX0H2t3M2S/rDFsNCjGL1MfwiBk sSobILBP+IdfiM45aPaa8eeMSkFM4WJUsAoa8uhDGvgwDTR1rVXDVdMA3NnpT5Tm gSHdt2LTDpa4ib6nKBIjnU+gYxLJMjFwJ1Onm4X2qzpZPY3F3Y19ok0LjJodOZ45 c2NvD5gQt1dw7wSCCB3gDtlb+FPaL8effW5Efx6eMkaaJ58BvyX/7k9RwM59SYvX 7lI3EKrlaAei1+AFAsX/ZXKQkgvoMzcEsbTyj/ErrbxjgH9v9B0VP6grDeTFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC8pfcvOnNK+QX5RE+fvhT9ked+swHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5fjEm9jlkbc6c3e5Wn9z3ejfHKL4TykrSIPqb+d5ZFkCuGzNYIujYSSJC7I KMH6ax8iUL5nb7XL8ycYzI++Dk3Rg1TWl9OK7q08EtzqI91dB2Dk5c0DTnjAa2MT sPWIqpz7JyUu4xuhKks0UoBysFLdjUxXKqyHVtqiIe1dufChuduqikRVoh8cdcsi 9bWbz0mZbAHOnA7sK9U43DMtTvcWHcDOBlaLETB1y4vqDA87X7HH8u+z2cMe8rXI 5uSqY6tm0HZilXM7ra01McJIsAa4S35UeqDEAQHOshQXdLgIqhBXJBm4ATByG5gf x0jdWkZPPxqZ35WSXKfKtI0ZWw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:16 2025 by rpki-client